Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
File:                     _JEop2LO62tZ9UMVaLwT_OQauhI.mft (raw, json)
Hash identifier:          06xWV3Q/10+sa2QJsipTcF7xAKiPcAjNJxl+DikjnWw=
Subject key identifier:   28:2A:73:3D:D7:38:79:3E:DD:30:EC:3D:F1:CA:69:C4:7F:3D:1C:DA
Authority key identifier: FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
Certificate issuer:       /CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Certificate serial:       0197B6A22E34830485F66FDDB54F8D65E78D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
Manifest number:          0419
Signing time:             Sat 28 Jun 2025 13:02:51 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:51 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:51 +0000
Files and hashes:         1: _JEop2LO62tZ9UMVaLwT_OQauhI.crl (hash: xKX8ap5v+B19fGhiwDmMlvB8jMrCQJRLlpfxwBvkIH0=)
                          2: vrcnG3rPeIv-84eM3hfeiXZcqyA.roa (hash: JWLSZU8dWBcg2FNxy+Ts9gij4yT1i3JNXoLy/WJRhwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a2:2e:34:83:04:85:f6:6f:dd:b5:4f:8d:65:e7:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
        Validity
            Not Before: Jun 28 13:02:51 2025 GMT
            Not After : Jun 29 13:02:51 2025 GMT
        Subject: CN=282a733dd738793edd30ec3df1ca69c47f3d1cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9a:af:17:75:4d:55:67:27:75:65:81:d7:e3:
                    aa:9b:fd:13:8f:72:79:ac:df:34:f2:67:3b:07:08:
                    cb:e7:80:4c:91:0c:ad:89:21:1e:8d:5f:ec:91:d6:
                    36:25:c2:75:88:60:a9:3e:26:25:1d:76:90:d1:91:
                    1e:1f:09:d3:6b:69:26:b3:af:19:5d:b3:b6:82:b6:
                    cd:cb:e5:c5:44:7d:80:45:c5:c4:ff:a7:a8:13:da:
                    21:31:9d:fd:f2:7e:ac:67:3d:0f:85:a4:95:51:4c:
                    d1:d3:73:50:c0:ee:7e:38:88:76:26:75:7c:90:47:
                    7c:be:27:7e:13:9a:74:35:0e:5f:1d:0b:07:ba:8a:
                    05:c0:01:16:02:9b:50:cc:54:42:0c:92:7c:28:21:
                    4a:f9:7b:05:a7:47:98:1a:01:e7:97:a7:22:ba:e9:
                    bf:37:f8:b6:37:da:dd:1f:70:70:77:07:4d:63:3a:
                    11:ad:14:7e:5f:ac:25:aa:d7:3a:40:d4:aa:c8:73:
                    ec:5f:7d:8a:ea:89:0e:ce:03:b3:86:69:36:da:b9:
                    77:5a:2c:e5:cb:d5:f0:1d:91:26:eb:3f:ee:c9:f1:
                    df:17:94:12:d0:77:12:71:9b:6e:1d:fe:95:cb:12:
                    53:6f:98:95:4f:e0:f9:10:3a:d3:73:53:a5:db:d1:
                    76:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:2A:73:3D:D7:38:79:3E:DD:30:EC:3D:F1:CA:69:C4:7F:3D:1C:DA
            X509v3 Authority Key Identifier:
                keyid:FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:61:e9:9d:cb:93:35:82:61:f2:ca:35:93:80:5c:59:3b:c5:
         07:7e:d8:e7:e7:de:af:1d:d2:c6:98:00:9b:79:56:8d:5f:f2:
         ff:c6:6f:aa:cf:89:4f:cc:6c:70:16:83:02:51:08:ba:fa:ab:
         53:68:80:88:e5:93:44:ea:a6:fd:74:f5:17:e1:08:2a:e7:f6:
         02:f3:f9:8d:d7:67:e4:38:f6:a7:d8:12:79:ce:dc:8f:81:41:
         25:01:52:88:54:f8:17:d2:5d:79:bf:3f:f4:3d:80:a3:fe:1c:
         cd:74:f3:d2:70:19:ba:1f:82:df:7f:02:2e:b2:2d:26:98:36:
         52:23:32:42:60:ee:16:13:93:03:e6:cc:d3:a9:f8:85:62:65:
         63:95:e5:5f:b0:c6:85:b7:0d:98:86:75:0b:70:66:b9:f9:6c:
         66:18:75:f6:e3:1b:ba:cf:46:73:ed:10:0b:ca:c4:06:d8:87:
         40:02:0f:23:75:67:72:7d:e8:be:5d:fb:1d:a9:50:48:00:1a:
         0d:cd:1a:54:50:8d:1e:cb:40:87:a0:ae:c9:df:b7:77:c8:da:
         da:73:44:5c:9a:83:dd:cd:4f:49:b4:0a:a6:c8:8c:77:fb:55:
         fd:69:f6:b5:79:99:3f:26:8a:c9:bc:f5:15:e5:6b:b5:b4:af:
         b5:d4:82:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:16:18 2025 by rpki-client